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W E CLAIM: 

1. An address resolution method for a virtual private network (VPN) 
comprising customer edge (CE) devices each having a provider edge (PE) 
interface, wherein one of the PE interfaces has a single layer 3 address in the 
VPN and supports a multiplex of layer 2 virtual circuits for communication with 
remote CE devices, the method comprising the steps of: 

- sending an address resolution request message, including a layer 3 
address of a remote CE device, through said PE interface over each 
layer 2 virtual circuit of the multiplex; 

- in response to reception of an message responding to said request 
message at said PE interface on one of the layer 2 virtual circuits, 
mapping the layer 3 address of said remote CE device to said one of the 
layer 2 virtual circuits. 

2. A method as claimed in claim 1, wherein the VPN is provided 
through a shared network infrastructure to which the CE devices are connected 
by their respective PE interfaces. 

3. A method as claimed in claim 2, wherein each layer 2 virtual circuit 
of said multiplex is provisioned in the shared network infrastructure for 
communication with a respective remote CE device of the VPN. 

4. A method as claimed in claim 1 , wherein said PE device belongs to 
a CE device including a layer 3 router of the VPN. 

5. A method as claimed in claim 1 , wherein the layer 2 virtual circuits of 
said multiplex are distinguished by respective virtual local area network 
identifiers included in tagged data frames exchanged through said one of the 
PE interfaces. 

6. A method as claimed in claim 5, wherein the step of mapping the 
layer 3 address of said remote CE device to one of the layer 2 virtual circuits 
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comprises memorizing a correspondence between said layer 3 address and the 
virtual local area network identifier of said one of the layer 2 virtual circuits. 

7. A method as claimed in claim 1, wherein the response message 

includes the layer 3 address of said remote CE device. 

5 8. A method as claimed in claim 1, wherein said one of the PE 

interfaces is an Ethernet interface. 

9. A method as claimed in claim 8, wherein the address resolution 
request and response messages are messages of a standard Ethernet Address 
Resolution Protocol (ARP). 

10. A method as claimed in claim 1, wherein the VPN has a hub-and- 
spoke topology, with said one of the PE interfaces at a hub site and said 
remote CE devices at spoke sites. 

11. A customer edge (CE) device for a virtual private network (VPN), 
comprising: 

- a provider edge (PE) interface having a single layer 3 address in the VPN 
and supporting a multiplex of layer 2 virtual circuits; 

- means for transmitting, on each of the layer 2 virtual circuits of the PE 
interface, an address resolution request message including a layer 3 
address of a remote CE device of the VPN; and 

- means responsive to reception of an address resolution response 
message on one of the layer 2 virtual circuits, for mapping the layer 3 
address of said remote CE device to said one of the layer 2 virtual 
circuits. 

12. A device as claimed in 11, wherein said PE device is for connection 
25 to a shared network infrastructure in which each layer 2 virtual circuit of said 

multiplex is provisioned for communication with a respective remote CE device 
of the VPN. 

13. A device as claimed in claim 11, further comprising a layer 3 router 
of the VPN. 
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14. A device as claimed in claim 11, wherein the layer 2 virtual circuits of 
said multiplex are distinguished by respective virtual local area network 
identifiers included in tagged data frames exchanged through said PE interface. 

15. A device as claimed in claim 14, wherein the means for mapping the 
5 layer 3 address of a remote CE device to one of the layer 2 virtual circuits 

comprises means for storing a correspondence between said layer 3 address 
and the virtual local area network identifier of said one of the layer 2 virtual 
circuits. 

16. A device as claimed in claim 11, wherein the response message 
10 includes the layer 3 address of said remote CE device. 

17. A device as claimed in claim 11, wherein said PE interface is an 
Ethernet interface. 

18. A device as claimed in claim 17, wherein the address resolution 
request and response messages are messages of a standard Ethernet Address 

15 Resolution Protocol (ARP). 

19. A device as claimed in claim 11, disposed at a hub site of the VPN 
having a hub-and-spoke topology. 

20. An address resolution method for a virtual private network (VPN) 
provided through a shared network infrastructure, the VPN comprising a 

20 plurality of customer edge (CE) devices each having a provider edge (PE) 
interface for connection to the shared network infrastructure, wherein a 
respective layer 3 address is allocated to each CE device of the VPN, wherein 
the CE devices of the VPN include a first CE device having a layer 3 router and 
a PE interface supporting a multiplex of layer 2 virtual circuits, wherein each of 

25 said layer 2 virtual circuits is distinguished by a respective virtual local area 
network identifier included in tagged data frames exchanged through said PE 
interface and is provisioned in the shared network infrastructure for 
communication with a respective remote CE device of the VPN, the method 
comprising the following steps: 
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- transmitting an address resolution request message from the first CE 
device on each of the layer 2 virtual circuits of the PE interface, the 
address resolution request message including the layer 3 address 
allocated to a second CE device of the VPN; 

- in response to reception of said request message at the second CE 
device, returning an address resolution response message to the first CE 
device; and 

- in response to reception of the response message at the first CE device, 
memorizing a correspondence between the layer 3 address allocated to 
the second CE device and the virtual local area network identifier of the 
layer 2 virtual circuit on which the response message is received. 

21. A method as claimed in claim 20, wherein the address resolution 
response message includes the layer 3 address allocated to the second CE 
device, to be memorized in correspondence with the virtual local area network 
identifier of the layer 2 virtual circuit on which the response message is 
received at the first CE device. 

22. A method as claimed in claim 20, wherein the PE interface is an 
Ethernet interface. 

23. A method as claimed in claim 22, wherein the address resolution 
request and response messages are messages of a standard Ethernet Address 
Resolution Protocol (ARP). 

24. A method as claimed in claim 20, wherein the VPN has a hub-and- 
spoke topology, said first CE device being the hub and the other CE devices 
being spokes. 

25. A customer edge (CE) device for a virtual private network (VPN) 
provided through a shared network infrastructure, comprising: 

- a provider edge (PE) interface having a single layer 3 address in the 
VPN, for connection to the shared network infrastructure, said PE 
interface supporting a multiplex of layer 2 virtual circuits, wherein each of 
said layer 2 virtual circuits is distinguished by a respective virtual local 
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area network identifier included in tagged data frames exchanged 
through said PE interface and is provisioned in the shared network 
infrastructure for communication with a respective remote CE device of 
the VPN; 

- a layer 3 router for routing packets based on layer 3 addresses contained 
therein; 

- means for transmitting an address resolution request message on each 
of the layer 2 virtual circuits of the PE interface, the address resolution 
request message including a layer 3 address allocated to one of the 
remote CE devices of the VPN; and 

- means responsive to reception of an address resolution response 
message on the PE interface, for memorizing a correspondence between 
the layer 3 address allocated to said one of the remote CE devices and 
the virtual local area network identifier of the layer 2 virtual circuit on 
which the response message is received. 

26. A device as claimed in claim 25, wherein the address resolution 
response message includes the layer 3 address allocated to said one of the 
remote CE devices, to be memorized in correspondence with the virtual local 
area network identifier of the layer 2 virtual circuit on which the response 
message is received on the PE interface. 

27. A device as claimed in claim 25, wherein the PE interface is an 
Ethernet interface. 

28. A device as claimed in claim 27, wherein the address resolution 
request and response messages are messages of a standard Ethernet Address 
Resolution Protocol (ARP). 



